RHSA-2026:47103: Important: libXfont2 security update

Published Jul 28, 2026

Updated

X.Org X11 libXfont2 runtime librarySecurity Fix(es): libXfont2: BitmapScaleBitmaps Integer Overflow Heap Buffer Overflow (CVE-2026-56001) libXfont2: PCF Font Parsing Heap Buffer Overflow (CVE-2026-56002) libXfont2: computeProps Property Buffer Heap Buffer Overflow (CVE-2026-56003) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected Software

1 affected component

X.Org libXfont2

Event History

Jul 28, 2026

Advisory Published

via Red Hat·12:00 AM

Data Sourced

via Red Hat·12:00 AM

RemedyDescriptionAffected Software

Frequently Asked Questions

What is the severity of RHSA-2026:47103?

The severity of RHSA-2026:47103 is considered important due to multiple buffer overflow vulnerabilities.

How do I fix RHSA-2026:47103?

To fix RHSA-2026:47103, update the libXfont2 package to the latest version provided by your distribution.

What vulnerabilities are addressed in RHSA-2026:47103?

RHSA-2026:47103 addresses three heap buffer overflow vulnerabilities identified by CVE-2026-56001, CVE-2026-56002, and CVE-2026-56003.

What is CVE-2026-56001 in relation to RHSA-2026:47103?

CVE-2026-56001 is an integer overflow vulnerability in BitmapScaleBitmaps that could lead to a heap buffer overflow.

What is CVE-2026-56002 in relation to RHSA-2026:47103?

CVE-2026-56002 is a heap buffer overflow vulnerability discovered in the PCF font parsing process.